From 556901cee08e4bbe6d306ec5930cacc8ab64770d Mon Sep 17 00:00:00 2001 From: Binay <150876063+bkd-dotcom@users.noreply.github.com> Date: Wed, 12 Aug 2026 11:38:02 -0400 Subject: [PATCH] chore: rebrand bkd-dotcom/umbra-* references to Signetry/* --- .github/workflows/cla.yml | 4 ++-- .github/workflows/reviewer.yml | 4 ++-- .pre-commit-hooks.yaml | 4 ++-- CHANGELOG.md | 2 +- CODE_OF_CONDUCT.md | 2 +- PRIVACY.md | 4 ++-- README.md | 10 +++++----- SECURITY.md | 6 +++--- demos/try-guard.sh | 2 +- universal/umbra-guard.sh | 4 ++-- 10 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index d88a03b..20f09d5 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -45,10 +45,10 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: path-to-signatures: "signatures/cla.json" - path-to-document: "https://github.com/bkd-dotcom/umbra-precommit/blob/main/CLA.md" + path-to-document: "https://github.com/Signetry/precommit/blob/main/CLA.md" branch: "cla-signatures" allowlist: "dependabot[bot],bkd-dotcom" - custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/bkd-dotcom/umbra-precommit/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:" + custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/Signetry/precommit/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:" custom-pr-sign-comment: "I have read the CLA Document and I hereby sign the CLA" custom-allsigned-prcomment: "All contributors have signed the CLA. ✅" lock-pullrequest-aftermerge: false diff --git a/.github/workflows/reviewer.yml b/.github/workflows/reviewer.yml index b0e58db..99ee6f8 100644 --- a/.github/workflows/reviewer.yml +++ b/.github/workflows/reviewer.yml @@ -3,7 +3,7 @@ name: Reviewer # Advisory PR review (umbra-reviewer): surfaces architecture + security issues # and posts one recommendation comment. Advisory only — it never merges and never # fails the PR. Changes to security-sensitive surfaces (workflows, packaging) are -# escalated to a human. See https://github.com/bkd-dotcom/umbra-reviewer +# escalated to a human. See https://github.com/Signetry/reviewer on: pull_request: @@ -24,7 +24,7 @@ jobs: python-version: "3.12" - name: Install umbra-reviewer # source-available (All Rights Reserved); install from source, not PyPI. - run: pip install "umbra-reviewer @ git+https://github.com/bkd-dotcom/umbra-reviewer@v0.1.1" + run: pip install "umbra-reviewer @ git+https://github.com/Signetry/reviewer@v0.1.1" - name: Compute the PR diff env: BASE_SHA: ${{ github.event.pull_request.base.sha }} diff --git a/.pre-commit-hooks.yaml b/.pre-commit-hooks.yaml index 3941c41..4b8b632 100644 --- a/.pre-commit-hooks.yaml +++ b/.pre-commit-hooks.yaml @@ -1,12 +1,12 @@ # Umbra pre-commit hook. Add to your repo's .pre-commit-config.yaml: # # repos: -# - repo: https://github.com/bkd-dotcom/umbra-precommit +# - repo: https://github.com/Signetry/precommit # rev: v0.3.0 # hooks: # - id: umbra-guard # -# Requires: pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.3" +# Requires: pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.3" - id: umbra-guard name: Umbra guard (contract scope check) description: Block staged changes that fall outside .umbra/admission.yaml scope. diff --git a/CHANGELOG.md b/CHANGELOG.md index 52e896f..e35a7d1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,7 +7,7 @@ Follows [Keep a Changelog](https://keepachangelog.com/) / [SemVer](https://semve ### Added - Split out of the `umbra-plugins` monorepo into a dedicated repository under the - [Umbra umbrella](https://github.com/bkd-dotcom/umbra-umbrella), per the platform + [Umbra umbrella](https://github.com/Signetry/signetry), per the platform architecture (one repo per integration). - Pins `umbra-core>=0.3.0` (capability graph, plan binding, masked verifier, G1/G2/G3 gates, extension admission). diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md index d83f832..ea767c6 100644 --- a/CODE_OF_CONDUCT.md +++ b/CODE_OF_CONDUCT.md @@ -52,7 +52,7 @@ an individual is officially representing the community in public spaces. Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the maintainers via -[GitHub private vulnerability reporting](https://github.com/bkd-dotcom/umbra-precommit/security/advisories/new) +[GitHub private vulnerability reporting](https://github.com/Signetry/precommit/security/advisories/new) or by opening a confidential issue. All complaints will be reviewed and investigated promptly and fairly. diff --git a/PRIVACY.md b/PRIVACY.md index 232fed1..a405f88 100644 --- a/PRIVACY.md +++ b/PRIVACY.md @@ -9,7 +9,7 @@ in this repository) run entirely **locally and offline**: - The `PreToolUse` guard hook reads the proposed file path or command from the editor and checks it against your repository's `.umbra/admission.yaml` using the - local `umbra` command (from the [umbra-core](https://github.com/bkd-dotcom/umbra-core) + local `umbra` command (from the [umbra-core](https://github.com/Signetry/core) Python package). No data leaves your machine. - The plugin makes **no network requests**, sends **no telemetry or analytics**, and stores **no personal data**. It has no servers and no backend. @@ -22,5 +22,5 @@ Any network behavior is determined solely by tools **you** invoke (e.g. your own ## Contact Questions: open an issue at - or email + or email `binaydalai2024@gmail.com`. diff --git a/README.md b/README.md index 5364e42..9da7f1e 100644 --- a/README.md +++ b/README.md @@ -6,13 +6,13 @@ **Govern coding-agent changes at the git boundary — pre-commit, pre-push, or CI.** -The universal, editor-agnostic guard for [umbra-core](https://github.com/bkd-dotcom/umbra-core): +The universal, editor-agnostic guard for [umbra-core](https://github.com/Signetry/core): a deterministic pre-action check that blocks changes falling outside your repo's `.umbra/admission.yaml` scope, before they're committed or pushed. -Part of the [Umbra platform](https://github.com/bkd-dotcom/umbra-umbrella). +Part of the [Umbra platform](https://github.com/Signetry/signetry). -> Prerequisite: `pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4"` and a `.umbra/admission.yaml` in +> Prerequisite: `pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.4"` and a `.umbra/admission.yaml` in > your repo (a conservative default applies without one). ## pre-commit @@ -21,7 +21,7 @@ Add to your `.pre-commit-config.yaml`: ```yaml repos: - - repo: https://github.com/bkd-dotcom/umbra-precommit + - repo: https://github.com/Signetry/precommit rev: v0.3.0 hooks: - id: umbra-guard @@ -51,7 +51,7 @@ Try it: `demos/try-guard.sh`. A local hook is best-effort defense-in-depth (a developer can `--no-verify`). The enforced gate is the **Umbra Admission** required check on the PR: -. Nothing merges without a signed +. Nothing merges without a signed receipt, and `auto_merge` is always false — a human merges. ## License diff --git a/SECURITY.md b/SECURITY.md index e335241..7d50672 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,13 +1,13 @@ # Security policy -This integration is a thin surface over [umbra-core](https://github.com/bkd-dotcom/umbra-core), +This integration is a thin surface over [umbra-core](https://github.com/Signetry/core), which owns all governance logic. Please report vulnerabilities in the governance pipeline (contract evaluation, guard, verifier, receipts) against **umbra-core**. ## Reporting Open a private security advisory on the affected repository, or use the umbrella's -security contact: . Do not open a +security contact: . Do not open a public issue for an unpatched vulnerability. ## Scope and guarantees @@ -15,7 +15,7 @@ public issue for an unpatched vulnerability. - The soft, in-editor guard is **defense-in-depth**. It may fail open only with a loud `INACTIVE` signal; it is not the hard security boundary. - The hard guarantee is the required check on the pull request - ([umbra-action](https://github.com/bkd-dotcom/umbra-action)) plus the signed + ([umbra-action](https://github.com/Signetry/action)) plus the signed receipt — verifiable offline against Umbra's pinned public key. - `auto_merge` is always false. Umbra governs the agent; a human merges. - This integration never reimplements policy; it pins `umbra-core`. diff --git a/demos/try-guard.sh b/demos/try-guard.sh index 0c39a74..9aaee4f 100755 --- a/demos/try-guard.sh +++ b/demos/try-guard.sh @@ -6,7 +6,7 @@ # .umbra/admission.yaml, showing forbidden paths/commands blocked and an in-scope # path allowed. Deterministic (umbra-core), never the model. # -# Requirements: bash, git, and `pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4"`. +# Requirements: bash, git, and `pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.4"`. # # Usage: bash demos/try-guard.sh set -euo pipefail diff --git a/universal/umbra-guard.sh b/universal/umbra-guard.sh index 9a1a1d4..6e24caa 100755 --- a/universal/umbra-guard.sh +++ b/universal/umbra-guard.sh @@ -6,7 +6,7 @@ # or manually. It checks proposed file paths and/or a command against the repo's # .umbra/admission.yaml and exits non-zero (blocking) on a violation. # -# Requires: pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4" +# Requires: pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.4" # # Usage: # umbra-guard.sh --path src/app.py @@ -17,7 +17,7 @@ set -euo pipefail if ! command -v umbra >/dev/null 2>&1; then - echo "umbra-guard: umbra-core not installed. Run: pip install 'umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4'" >&2 + echo "umbra-guard: umbra-core not installed. Run: pip install 'umbra-core @ git+https://github.com/Signetry/core@v0.5.4'" >&2 # Fail open by default so this never blocks a commit unexpectedly; set # UMBRA_GUARD_STRICT=1 to fail closed when umbra is missing. [ "${UMBRA_GUARD_STRICT:-0}" = "1" ] && exit 1 || exit 0